HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountCredentialsHighContained

DOTERRA INTERNATIONAL, LLC

bd_6a3e063adb2d639d · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Apr 18, 2016

To disclose

—

Affected

2,330state residents only

Linked

8 filings

Confidence

66%

Full breach record for DOTERRA INTERNATIONAL, LLC →

dOTERRA International, LLC notified the NH Attorney General of a March 2016 breach involving a third-party hosting vendor. Unauthorized access resulted in the acquisition of personal information including SSNs, payment card data, and credentials for approximately 2,330 NH residents. dOTERRA engaged security experts and law enforcement, offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 1, 2016

Begins

Apr 18, 2016

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

California State AGbd_2143531664cf479b2016-04-18Verified
Washington State AGbd_9a87e92b0eb4f9a12016-04-18Candidate
Montana State AGbd_b620c205f026aa442016-04-18Verified
Massachusetts State AGbd_e8aee4e3ea940ead2016-04-18Verified

Show 3 more filings ↓up to 24d gap

Oregon State AGbd_fbb6cfe862b6c98e2016-05-02 · +14dVerified
Hawaii State AGbd_9c78fc895e9a66872016-05-11 · +23dVerified
South Carolina State AGbd_05a513dc0989d7562016-05-12 · +24dVerified

Name: DOTERRA INTERNATIONAL, LLC
norm: doterra international

Name: DOTERRA INTERNATIONAL, LLC
norm: doterra international
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Mar 1, 2016 – Mar 31, 2016
Materiality determined: —
Notification sent: Apr 18, 2016
Affected individuals: 2,330state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentials
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: supply_chain

During the incident: Working closely with law enforcement authorities
Working closely with leading security experts
Engaged industry-leading security firms to assist us
Offering identity protection and credit monitoring services to affected individuals for two years
Changes made: Investing heavily to implement its own state-of-the-art systems to support growth and expansion and enhance security
Reviewing and strengthening IT systems and protocols
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

California State AGApr 18 · first

Washington State AGApr 18 · first

Montana State AGApr 18 · first

Massachusetts State AGApr 18 · first

New Hampshire State AGApr 18 · first · this page

Oregon State AG+14d

Hawaii State AG+23d

South Carolina State AG+24d

Pattern: first filing Apr 18 (CA), last May 12 (SC) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/doterra-international-20160418.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 18, 2016
Raw hash: d3e1311897dd5fcdc4ca654f2a02ab9205533b7e6649a9d09889d073558c35af

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityDOTERRA INTERNATIONAL, LLC

Victim entityDOTERRA INTERNATIONAL, LLC

IncidentThird-Party / Supply Chain

Stated responseWorking closely with law enforcement authorities

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov